#953962 upgrade-reports: kprop uses a new default kerberos filename for propogating to replica kdcs

#953962#5
Date:
2020-03-15 04:09:02 UTC
From:
To:
After upgrading from stretch to buster on a kerberos domain controler that I
had configured a replication script.

/etc/cron.hourly/krb5-prop:
/usr/sbin/kprop: No such file or directory while trying to open
/var/lib/krb5kdc/replica_datatrans
Propagation of database to host <replica>
failed with exit code 1.


The script I was using that was installed into /etc/cron.hourly looked like the
following:

#+BEGIN_SRC bash
#!/bin/sh

# Distribute KDC database to slave servers
# Created by Jason Garman for use with MIT Kerberos 5
# Modified by Jaap Winius <jwinius@rjsystems.nl>

slavekdcs=<replica>

/usr/sbin/kdb5_util dump /var/lib/krb5kdc/slave_datatrans
error=$?

if [ $error -ne 0 ]; then

        echo "Kerberos database dump failed"
        echo "with exit code $error. Exciting."
        exit 1
fi

for kdc in $slavekdcs; do

        /usr/sbin/kprop $kdc > /dev/null
        error=$?

        if [ $error -ne 0 ]; then

                echo "Propagation of database to host $kdc"
                echo "failed with exit code $error."
        fi
done

exit 0
#+END_SRC


I patched it with this:

#+BEGIN_SRC diff
--- krb5-prop.orig      2020-03-14 21:05:08.429907209 -0700
+++ krb5-prop.new       2020-03-14 21:05:35.946011884 -0700
@@ -5,7 +5,7 @@
 # Modified by Jaap Winius <jwinius@rjsystems.nl>